iRules HTTPS drop request

Hi Ram,

Do you have this iRule added to the HTTP VIP? Do you have a default pool on the HTTP VIP?

Can you add logging to the iRule:

 
 when HTTP_REQUEST { 
  
    log local0. "[IP::client_addr]:[TCP::client_port]: New HTTP request to [HTTP::host][HTTP::uri]" 
  
     Check if requested path does not start with /PUBLIC 
    if { not ([HTTP::path] starts_with "/PUBLIC") } { 
  
       log local0. "[IP::client_addr]:[TCP::client_port]: Redirecting to https://[HTTP::host][HTTP::uri]" 
  
        Redirect non-public requests to the same host/URI but via https 
       HTTP::redirect "https://[HTTP::host][HTTP::uri]" 
    } 
 } 
 

One thing to be aware of is if you're trying to prevent a client from submitting sensitive data via HTTP and the client is being directed to make a request via HTTP (ex: form action=http://...) they'll already have exposed the sensitive data by the time you redirect them to HTTPS.

Aaron